vulnerability

SUSE: CVE-2018-10194: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 18, 2018
Added
May 19, 2018
Modified
Oct 22, 2021

Description

The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.

Solution(s)

suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-fonts-othersuse-upgrade-ghostscript-fonts-russuse-upgrade-ghostscript-fonts-stdsuse-upgrade-ghostscript-ijs-develsuse-upgrade-ghostscript-librarysuse-upgrade-ghostscript-minisuse-upgrade-ghostscript-mini-develsuse-upgrade-ghostscript-omnisuse-upgrade-ghostscript-x11suse-upgrade-libgimpprintsuse-upgrade-libgimpprint-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.